master services inc

Info Level: Beginner Presenter: Eli the Computer Guy Date Created: October 13, 2010 Length of Class: 69 Minutes Tracks Computer Security /Integrity Prerequisites Introduction to Risk Assessment Purpose of Class This class teaches students how to conduct a Risk Assessment Topics Covered The Risk Assessment Process What to Look for in a Risk Assessment Class Notes Introduction Security is just good technology Risk is a business decision Assessment Process Overview Determine Vulnreabilities Determine Threats Determine Assets Determine Buiness Justifications Interview the Owner/ CEO What's your business? What do you do? How computer dependant are you? How comfortabale with technology are you? How many employees? How many employees with computers? What problems are you currently having? What are your concerns? Do You have legal requirements for data? How are your systems currently being used? Do you own/ can you make changes to the building? Do you have maintenance contracts with other IT companies. Current Operational Security Procedures Known Threats -- Natural/ Employees/ Outsiders What is your Risk tolerance What's you IT Budget? Observer infrastructure Quality of cabling? Quality/ age of equipment Physical Appearance of equipment? Pointless equipment? Physical Security Talk with Employees What problems are you having? Is there something that can make your life better? Documentation Analysis Who/ What When/ Where /Why? Is the software accessible Systems Analysis Sit down at the computers/ equipment and determine their current state Not enough RAM can cause as much economic loss as a virus! Create a Plan and Brief Client Create a plan spelling out vulnerabilities, threats, assets Plan should have as few options as possible Plan should have steps -- first infrastructure, then computers, then policies Focus on business reasons Determine feasibility and Get buy in Mitigation Process As you work the plan continue to assess systems and situation Is the planned solution still the best solution?

Info Level: Beginner Presenter: Eli the Computer Guy Date Created: October 13, 2010 Length of Class: 69 Minutes Tracks Computer Security /Integrity Prerequisites Introduction to Risk Assessment Purpose of Class This class teaches students how to conduct a Risk Assessment Topics Covered The Risk Assessment Process What to Look for in a Risk Assessment Class Notes Introduction Security is just good technology Risk is a business decision Assessment Process Overview Determine Vulnreabilities Determine Threats Determine Assets Determine Buiness Justifications Interview the Owner/ CEO What's your business? What do you do? How computer dependant are you? How comfortabale with technology are you? How many employees? How many employees with computers? What problems are you currently having? What are your concerns? Do You have legal requirements for data? How are your systems currently being used? Do you own/ can you make changes to the building? Do you have maintenance contracts with other IT companies. Current Operational Security Procedures Known Threats -- Natural/ Employees/ Outsiders What is your Risk tolerance What's you IT Budget? Observer infrastructure Quality of cabling? Quality/ age of equipment Physical Appearance of equipment? Pointless equipment? Physical Security Talk with Employees What problems are you having? Is there something that can make your life better? Documentation Analysis Who/ What When/ Where /Why? Is the software accessible Systems Analysis Sit down at the computers/ equipment and determine their current state Not enough RAM can cause as much economic loss as a virus! Create a Plan and Brief Client Create a plan spelling out vulnerabilities, threats, assets Plan should have as few options as possible Plan should have steps -- first infrastructure, then computers, then policies Focus on business reasons Determine feasibility and Get buy in Mitigation Process As you work the plan continue to assess systems and situation Is the planned solution still the best solution?

Info Level: Beginner Presenter: Eli the Computer Guy Date Created: October 12, 2010 Length of Class: 57 Minutes Tracks Computer Security /Integrity Prerequisites None Purpose of Class This class teaches students the basic concepts behind Risk Assessments. Topics Covered Defining Risk, Threat and Vulnerability Types of Protections Mitigation Concepts Business Rational for Risk Assessment and Management Class Notes Introduction The better you know technology the better you will do with Risk Assessment/ Management. Risk Risk = Treat x Vulnerability Overview of Risk Risk is defined as the likelihood of financial loss. Risk is a business concepts not a technological one. Down Time Fraud Legal data loss issues Hacking -- Attacks from your network Data Theft (Trade Secrets) Overview of Threat i. Natural Disatser ii. Malicious Human iii. Accidental Human iv. System Failure Impersonation Interception Interference Overview of Vulnerability Flooding Theft of Systems Hacking Viruses Overview of Protections Technoloigical Safe Guards Physical/ Operational Security Disaster Plan Documentation Technological Safeguards (Firewalls, Antivirus) Concepts of Mitigation Incident - Response - Debrief - Mitigation Making Bad not so bad You will never be safe Security Buy In and Quantifying Risk The business leaders will make the final decision on Risk Management The better your BUSINESS argument the more likely you are to get the go ahead. What is the cost of downtime What is the legal cost Cost of Security vs. Benefit Final Thoughts Risk is a BUSINESS concept! The more you understand about business and can talk about financial ramifications the more likely you are to get you fancy new security equipment. Resources US Computer Emergency Readiness Team

Info Level: Beginner Presenter: Eli the Computer Guy Date Created: October 12, 2010 Length of Class: 57 Minutes Tracks Computer Security /Integrity Prerequisites None Purpose of Class This class teaches students the basic concepts behind Risk Assessments. Topics Covered Defining Risk, Threat and Vulnerability Types of Protections Mitigation Concepts Business Rational for Risk Assessment and Management Class Notes Introduction The better you know technology the better you will do with Risk Assessment/ Management. Risk Risk = Treat x Vulnerability Overview of Risk Risk is defined as the likelihood of financial loss. Risk is a business concepts not a technological one. Down Time Fraud Legal data loss issues Hacking -- Attacks from your network Data Theft (Trade Secrets) Overview of Threat i. Natural Disatser ii. Malicious Human iii. Accidental Human iv. System Failure Impersonation Interception Interference Overview of Vulnerability Flooding Theft of Systems Hacking Viruses Overview of Protections Technoloigical Safe Guards Physical/ Operational Security Disaster Plan Documentation Technological Safeguards (Firewalls, Antivirus) Concepts of Mitigation Incident - Response - Debrief - Mitigation Making Bad not so bad You will never be safe Security Buy In and Quantifying Risk The business leaders will make the final decision on Risk Management The better your BUSINESS argument the more likely you are to get the go ahead. What is the cost of downtime What is the legal cost Cost of Security vs. Benefit Final Thoughts Risk is a BUSINESS concept! The more you understand about business and can talk about financial ramifications the more likely you are to get you fancy new security equipment. Resources US Computer Emergency Readiness Team